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[57] ABSTRACT 

A method and apparatus for certifying services ob- 
tained with the aid of a portable carrier such as a mem- 
oryj:ard^ pom 

adapted-to be connectedlo^ apparatus (1) that calcu- 
latg g a vi sual-record^ or cert ificatC(C).^composed^ a 
resiSl (R)"and'parameters (PI, PE) necessary for calcu- 
lating the result. This result is calculatedby-processing 
circuits (T2) in:the;c^dh(2)IundeOHexontr 
gram (P2) recorded in its memory (M2) and of a secret 
key (S). The result emitted after a service has been 
furnish^_camjhen_b^^ 
service has been furnished.,. — — 
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once. But, such a solution requires relatively expensive 

METHOD AND APPARATUS FOR CERTIFYING equipment. 
SERVICES OBTAINED USING A PORTABLE 

CARRIER SUCH AS A MEMORY CARDr OBJECT AND SUMMARY OF THE INA^NTION 

5 By way of contrast, it is the object of the present 

FIELD OF THE INVENTION invention to provide an intermediate solution, where 

The^subject invention relates to a method and an the control and verification operations are perfomed at 

apparatus for certifying services obtained with th^aid ^^"^^"^ furnished, with sufficient 

of rportabSxamer^uch as-a memory^^ guarantees to the purveyor of the services, and where 

~— ^ 10 they can be completed later after the service has been 

BACKGROUND OF THE INVENTION furnished, to certify that the service has been furnished 

Although the magnetic card is widely used as a means P^^P^^ conditions, both for the customer and for 

of furnishing services, purveyors of these services are .f^^yor. The necessary eqmpment is furthermore 

made uneasy by the increasing fraud in comiection with l^nuted to a simple apparatus, which is neither bulky nor 

services furnished because of stolen or counterfeit ^""^JP^'f^ ^^'^ advantageously pomble. 

The mvention proposes a method for certifying a 

The disadvantages of magnetic cards wiU be better TJZ^^^I^'^ '^^f '"^^ 

miderstood from a brief revilw of the mamier in which ^^T.^.tTl^^"^^^^^ ° ' '^P""'?' 

a service is provided with a card with a magnetic track, ^^'^^J^^^^^^^ 

takmg a payment card as an example. ^° ^ certificate compnsmg at least two data, the first 

a paymcm (.aiu iw ou cAaiii|/w. ^ calculatcd by the processmg circuits 

First, proof that a transaction has taken olace be- . j . ^t. . • . f ^ > 

piuui luav o iioiioavuvii u« wuwc i i^iavc uc- ^^^^ parameters that are mtemal and/or external to 

tween a customer and a vendor takes the materia^ form ^^e card ^d on a secret key, and the second being the 

of ail acbiowledgement or receipt, on which the fol- aforementioned internal aid/or external parameters 

lowmg mformaUon,m particular is wm^^^^^ 25 ^^at were necessary for calculating the result, and re- 

pf the transaction and mformaUon that identifies the ^^is certificate on a carrier as a means of proof 

customer (name, account number, etc ), picked up di- ^hat the service was furnished, and in that it comprises, 

reedy from the card (usmg the ma^eUc ^ack and/or ^ ^ 3^,^^^ recalculating, by the processing cir- 

information embossed on it), and information identify- ^^^g ^ ^^^^^^ apparatus, a result based on the inter- 

mg ^the vendor. After sigjnature by the customer, the 30 ^ and/or external parameters of the certificate and on 

duphcate of the receipt is given to the customer as ^ gg^ret key, and comparing this result with the result of 

proof, and the ongmal is transmitted by the vendor to certificate to certify that the service was in fact 

Its bank. . , . provided with the aid of a card issued for obtaining this 

Second, the bank commences a senes of operations, service 

based on the information written on the receipt, to debit 35 another feature of the invention, the result of the 

the customer's account by the amount of the transaction certificate is calculated in a first step by the processing 

a^d credit the vendor's account by the same amount. circuits of the card, and the secret key is prerecorded in 

Once the debitmg and creditmg operations have been the memory of the card to prevent calculating a plausi- 

completed, the transaction is validated. result in advance. 

From tiie above description of a transaction, two 40 in still anotiier feature of the invention, the result of 

statements can be made: certificatejakes into account a variable parameter 

1. The vendor has no means whatever at its disposal thaTis^mtemal to the.card, so Jhat two identical^results 
for detecting a stolen or counterfeit card at the moment ^1 nevw^beobtained for the same card. 

when Uie transaction is made, and In-anothCT-feature of the invention, tiie certificaten 

2. the bank has no means whatever at its disposal for 45 ^fiSSshed in tlirfirstSep^isTecbrded:either:of 
proving, simply by examinmg a receipt sent by a ven- Cmiie^f-^aper.-such-as-a-receiptror-on a ma^^ 

dor, that the corresponding transaction has been made electronicxSriw^^ ^^'^ ^ 

using a stolen or counterfeit card. Further advantages, characteristics and details of the 

Thus in the majority of cases, a fraudulent transaction invention will become apparent from the explanatory 

cannot be detected except by the customer, either after 50 description that follows, taken in conjunction with the 

discovering his card has been stolen or after his account appended drawings provided by way of example, 
has been debited for the amount of a transaction he 

never made. The bank wUl then open an inquiry, but die ^RIEF DESCRIPTION OF THE DRAWINGS 
results of that are never available immediately. FIG. 1 is a schematic representation of an apparatus 
Meanwhile, to reduce the number of fraudulent trans- 55 for performing the method according to the invention; 
actions, the vendor can, as a control, verify that the FIG. 2 shows an example of the certificate furnished 
name embossed on the card is the same one written on by a purveyor after a service has been furnished; and 
some other piece of identity presented by the customer. FIG. 3 is a schematic representation similar to FIG. 1 
This kind of control does dissuade those committing illustrating a further aspect of the invention for supply- 
petty fraud, but not experienced swindlers. A second 60 ing a parameter to the apparatus, 
control is to verify that the number embossed on the ^^^^ 

card is not included on a blacklist regularly updated by DESCRIPTION OF THE PREFERRED 

banking entities. These controls are not effective for a EMBODIMENT 

card that has not yet been reported stolen or for a coun- The example hereinafter described is an illustration of 

terfeit card that has not yet been detected. 65 the method according to the invention, in a payment 

A solution to this problem is to have all the opera- application; however, the principle of the invention 

tions, from the request for a service to the furnishing of remains valid no matter what kind of service is fur- 

the service, to be monitored, verified and executed all at nished. 
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Referring now to FIG. 1, the apparatus 1 includes the 
following: a data entry device 10, for example compris- 
ing a keyboard, a memory Ml, processing circuits Tl 
such as a typical microprocessor, and a display unit 11, 
for example comprising light-emitting diodes. 5 

All the circuits are connected to one another by a 
linking bus bl, which carries control, address, and data 
signals. 

This apparatus 1 is intended to receive a removable 
portable article 2, such as a memory card including a 10 
memory M2 and processing circuits T2 connected via a 
linking bus b2. Such a card is described in particular in 
French Pat Nos. 2 401 459 and 2 461 301 (correspond- 
ing to U.S. Pat. Nos. 4,211,919 and 4,382.279, respec- 
tively) assigned to the assignee of the subject invention. IS 

The memory M2 of the card 2 includes at least three 
memory zones Zl, 22, Z3. The memory zone Zl is 
inaccessible to writing and reading from outside, and 
the memory zones Z2, Z3 are inacessible except for 
reading from the outside. 20 

Coupling of the card 2 to the apparatus 1 is done via 
two interfaces I/F 22, 12 that are connected to one 
another by an electrical connection L. By way of exam- 
ple, these two interfaces are of the type described in the 
French patent of the assignee of the subject invention, 25 
published as French Pat. No. 2 490 367 (corresponding 
to U.S. patent application Ser. No. 302,595. fded Sept. 
15, 1981, now abandoned). The interface 12 of the appa- 
ratus 1 may advantageously be equipped with the con- 
nector such as that described in the French patent of the 30 
assignee of the subject invention, published as French 
Pat No. 2 445 560, (corresponding to U.S. Pat. Nos. 
4,443,049 and 4,449,775) so as to enable the card 2 to be 
coupled in a removable manner with the apparatus 1. 
Finally, the dialogue or data transmission mode be- 35 
tween the card 2 and the apparatus 1 may advanta- 
geously be that described in French Pat. No. 2 483 713 
(corresponding to U.S. Pat. No. 4.556,958) of the as- 
signee of the present invention. 

The subject matter of the aforenoted patents and 40 
publications are hereby incorporated by reference. 

The apparatus 1 is supplied with power either from 
the mains or by an autonomous battery 13 incorporated 
into the apparatus. It may advantageously be embodied 
in a portable manner, because the circuits it contains 45 
take up so little space. 

The method according to the invention will now be 
described in terms of this apparatus 1. 

Generally, the apparatus used for putting a transac- 
tion into material form and which is at the disposal of SO 
the vendor will fulfill three main functions: 

the first function is to authenticate the card presented 
by the customer, to enable the vendor to detect a coim- 
terfeit card; 

the second function is to identify the customer, by SS 
monitoring a code assigned to the customer and entered 
into the apparatus, to enable the vendor to detect a 
stolen card; and 

finally, the third function is to calculate a result based 
on internal and/or external parameters of the card. 60 

Then, the vendor makes, or has made, a means of 
proof of the transaction on a carrier of some kind (pa- 
per, electronic or magnetic) which in addition to data 
specific to the transaction will also carry a datum, called 
a certificate, comprising the aforementioned result and 65 
the parameters necessary for calculating it 

Generally, the apparatus used to validate a transac- 
tion and placed at the disposal of the banking entity will 



4 

fulfill one main function, based on a carrier serving as a 
means of proof and provided or forwarded by a vendor 
or a customer. This function comprises recalculating 
the result of the certificate based on the aforementioned 
parameters on the carrier, and verifying that this result 
is indeed equal to that written on the carrier. This kind 
of control enables the detection of counterfeit carriers 
made by a defrauding vendor, or the detection of a 
correct carrier that is nevertheless presented for cashing 
by some vendor other than the one who originally is- 
sued the carrier. 

The payment of the amount of the transaction is done 
in two steps. 

The first step is performed by the vendor and has 
seven successive phases: 
Phase 1 

The customer, upon request by the vendor, inserts his 
card 2 into the apparatus 1. If the card 2 is positioned 
correctly, it trips the appropriate switch or circuit to 
cause a voltage to be supplied to the apparatus 1. 

Phase 2 

The apparatus 1 performs a control of the customer's 
card 2. More precisely, the apparatus 1 will pick up a 
datum II in the memory zone Z2 of the card 2 at a 
predetermined address. This datum II enables verifica- 
tion of the status of the card; that is, it indicates whether 
previous use of the card has occasioned some prohibi- 
tion, or whether the period of card validity has expired, 
and so forth. 

Phase 3 

The apparatus 1 will authenticate the card 2, or in 
other words verify whether or not it is in the presence 
of a counterfeit card. 

To do so, the apparatus 1 picks up a datum 12 in its 
memory Ml and encodes this information prior to send- 
ing it to the card 2. The encoding is done via the pro- 
cessing circuits Tl of the apparatus, which apply to the 
datum 12 a public function with a public key of an algo- 
rithm with a public key translated by a program PI 
recorded in its memory Ml. 

This kind of algorithm is such that knowledge of the 
public function does not enable deducing the inverse 
secret key function. The inverse secret key function is 
recorded in the form of a program P'l in the memory 
zone Zl of the card 2. 

An encoded datum, that is, the datum 12 after its 
encoding by the apparatus 1, is transmitted to the card 
2 and decoded by it via the processing circuits T2 by 
executing the program P'l. 

The datum decoded by the card 2 is transmitted to 
the apparatus 1, which compares it with the original 
datum 12. If the two do not agree, then the apparatus 1 
has detected a counterfeit card. 

For security reasons, the encoded datum is variable. 
To this end, the apparatus 1 takes into account a vari- 
able datum 12. for example comprising a random num- 
ber. 

Alternatively, the public key algorithm could be used 
in a different way. The apparatus 1 sends a variable 
non-coded datum 12 (a random number, for example) to 
the card 2. The card 2 encodes this datum 12 by the 
program P'l, and the resulting datum is decoded by the 
program PI of the apparatus 1. 

Phase 4 

The apparatus 1 identifies the person carrying the 
card 2 after this person has entered into the apparatus 1 
a datum assigned to him and recorded earlier in the 
memory M2 of the card 2. 
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This datum is generally a confidential code Ce en- The use of this variable parameter PIV prevents the 

tered with the keyboard 10, and it is compared by the possibility that a defrauder may be able to reuse a result 

card 2 with a confidential code Ci prerecorded in the R that could be recognized as valid, even though based 

memory zone Zl of the card 2. on a fraudulent transaction. 

If identity does not exist between the two codes, or 5 To increase security, the program P2 for calculating 

the two codes Ci, Ce do not have a predetermined the result R also takes into account a secret key S, prere- 

relationship, the apparatus 1 signals by some suitable corded into the memory zone 21 of the card, to prevent 

means that the person is in possession of a stolen card, or & defrauder from being able to calculate a result R in 

that the person has made an error in entering his confi- advance. 

dential code. In the latter case, the person can begin the 10 By way of example, the result R is calculated on the 

operation again, but after three attempts, the card 2 o^- variable internal parameter PIV that speci- 

generally invalidates itself and becomes unusable, by status of the card; the internal parameter corre- 

assuming a predetermined status represented by the spending to the serial number of the card, or any other 

datum U written into the memory zone 22. It is this parameter assigned to the card, so that two cards having 

status that is controlled in the course of phase 2 above. ^* * 6^^®^ instant can calculate two 

The confidential code Ce entered into the apparatus 1 <iifferent results; an external parameter PEC assigned to 

and assigned to the person carrying the card 2 may be vendor so as to personalize the result R, to prevent 

replaced by some other datum, such as: ^ vendor from using for his own benefit a result R calcu- 

a numerical code which refiects the signature of the ^^f ^ ^ transaction performed for some 

person and is made by a signature analyzer 14 con- ^° vendor; and a secret key S. 

nected to the apparatus 1; or ^ conclusion, the certificate C causes the following 

a numerical code which reflects the voice of the per- to become vmble: 

son. made by a voice analyzer 15 connected to the appa- '^^} ^ Previously calcidated, 

jg^yg and all the parameters PI, PE, except for the secret 

pjj^ 5 25 key S, that were used in calculating the result R. 

The customer's card 2 calculates a result R with a , It is important to note tha^^ 

view to makmg a certificate C. ScT certificates C are never 

The certificate C comprises two data: n,. I _ i *u i_t 

a first damm. which is the result R of the calculation °r ^* program P2 that enables 

a luai u|iiuui, wuibuu uic irauii. n. ui luc vwvumuuii calcuIattOH of the fcsult R of a Certificate may be an 

performed by the card 2 based on mtema^ parameters ^ ^thm for reversible and public encoding, such as 

prerecorded m the card 2 and/or external parameters algorithm known by the name "DES". 

entered mto the apparatus 1; Ph^e 6 

and a second datum, which compris^ internal param- xhe vendor furnishes proof of the transaction by way 

eters PI and/or external parameters PE necessary for 35 a carrier, such as a piece of paper or receipt 3, on 

calculaung the result R, and which will then be used by ^y^h the following information, in particular, is writ- 

the bankmg entity to recalculate the value of the result ^^^^ referring to FIG. 2: 

R of the certificate C. the amount XI of the transaction; 

By way of example, the mtemal parameters PI used the date X2 of the transaction; 

by the card 2 to calculate the result R of the certificate 40 the ordinal number X3 of the receipt, 

C are the foUowmg: the identity X4 of the customer (name, banking entity 

a fixed parameter PIF assigned to the card, for exam- ^nd number of account to be debited) picked up from 

pie its serial number mscnbed m the memory 22 when the card- 

the card 2 is manufactured; the identity X5 to the vendor (name, banking entity 

and a variable parameter PIV, such as the datum that 45 and number of account to be credited; 

reflects the status of the card after each use, this status and the certificate C comprising a result R and the 

of the card 2 bemg recorded in the control memory parameters PI, PE necessary for calculating it, 

zone 23, and upon each transaction or use of the card, The certificate C, once it has been calculated, is dis- 

at least one bit of this memory zone is modified inter- played on a unit 11 of the apparatus 1, and the vendor 

nally by the procwsing circuits T2 of the card; 50 copies this onto the receipt 3. However, it may be pro- 

By way of example, the extenial parameters PE com- vided that the certificate C is posted automatically on 

municated to the card 2 for calculating the result R of the receipt 3. 

the certificate C are as follows: phase 7, the final phase 

a random datum PEA; The status of the card is modified in the memory zone 

and a datum PEC assigned to the vendor, which is 55 23 by the processing circuits T2, and the card 2 is taken 

prerecorded in the memory 1 of the apparatus Ml. back out of the apparatus 1. thereby terminating the 

The calculation of the result R is done by the process- supply of voltage to it. 

ing circuits T2 of the card 2 in accordance with a pro- The second step is performed in a single phase, on the 

gram P2 precorded in the memory zone 21 of the card part of the banking entity. 

that is not accessible from the outside, to keep it secret. 60 The receipt 3 thus made is then sent by the vendor to 

In a preferred mode for calculating the result R, the its banking entity, which has an apparatus 1 similar to 

program P2 takes into account at least one variable that of the vendor and also has a control card similar to 

parameter for each calculation, so that two results R the customer card 2, which is coupled to the apparatus 

will never be identical, in particular for the various 1 for recalculation of the result R of the certificate, 

results calculated by the same card. This variable pa- 65 based on the parameters posted on the receipt 3. Once 

rameter may advantageously be the internal parameter the control card, which is similar to the customer card 

PIV of the card that refiects the status of the card and 2, is coupled with the apparatus 1, an operator, via a 

is mofified each time it is used. keyboard 10 of the apparatus 1, enters the value of the 
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centificate C as it is posted on the receipt 3 and compris- prising at least first and second data, the first datum 

ing the result R and parameters PI, PE that were used to being the first result (R) calculated by the processing 

calculate it. This value is recorded in the memory Ml of circuits (T2) and the second datum being the internal 

the apparatus 1, and the parameters of the certificate C and/or external parameters (PI, PE) used for calculat- 

are transmitted to the control card. 5 ing the result (R); recording the certificate (C) on a 

The control card similar to customer card 2 contains carrier (3) as proof that the service was furnished; recal- 

the same program P2 for calculating the result as the culating in second processing circuit (T2) a second 

program P2 contained in the customer card 2 and also result (R) based upon the second datum recorded on the 

the same key as the secret key S of the customer card 2. certiRcate and upon another secret key (S) correspond- 
The processing circuits of this control card, which are 10 ing to the first-mentioned secret key, comparing the 

the same as the circuits T2 of the customer card 2, second result with the first result recorded on the certif- 

calculate a result R, and the control card or the appara- icate, and certifying, upon the first and second results 

tus I verifies that this result does in fact agree with that matching, that the service was properly obtained with 

of the receipt 3. If it does not agree, the banking entity the portable card. 

will have detected a false receipt 3 based on a fraudulent 15 2. A method as defmed by claim 1, wherein said cal- 

transaction. This verification is done by a comparator culating the result (R) of.thc certificate_(C), the calcula- 

circuit of the control card which is the same as the tion takes into accbunt-a^variable-intemal parameter 

comparator circuit 16 of the customer card 2, or by a (PIV). ~ ^ 

comparator circuit 17 of the apparatus 1. 3. A method as defmed by claims 1 or 2, wherein said 

Furthermore, the customer or the vendor can always 20 calculating comprises taking into account a fixed inter- 
have a transaction verified by presenting the duplicate nd.parameter (PIF) bel6iiging to the card in calculating 

of the receipt to the banking entity, which can immedi- jthe result"(R)"of the certificate"(C): ^ 

ately monitor the validity of the receipt by recalculating 4, A method as defined by claims 1 or 2, wherein said 

the result of the certificate. calculating comprises taking into account an external 

In another feature of the method according to the 25 parameter (PEC) transmitted to the card (2) in calculat- 

invention as shown in FIG. 3, when the calculation of ing the result (R) of the certificate (C). 

the result R of the certificate C takes into account an 5. A method as defmed by claim 3, wherein said cal- 

extemal parameter assigned to the vendor, this parame- culating further comprises taking into.account an extet 

ter PEC is not entered by the vendor. More precisely, ,nal:pafameter (PEC) tra^mkted jojhe„card (2) in caP 

the vendor has a card 4 similar to the previous card 2, 20 culating^5ieT«ult"(R) of the'certifica^ 

and which contains this parameter. For the apparatus 1 ^6.^A~method as defined by claims 1 or 2 wherein said 

to be able to function, an initializing operation must be calculating comprises taking into account a random 

performed, which comprises coupling the card 4 with external, parameter (PEA) transmitted tpJhexardX2) in 

the apparatus 1, having the apparatus 1 pick up the calculating the'result (R)jqf^e^rtifi^ 

parameter in the card 4 assigned to the vendor, and 35 7. A method as defmed by^laim srwherein said cal- 

storing this parameter PEC in the memory Ml of the culating comprises taking into account a random exter- 

apparatus 1. nal parameter (PEA) transmitted to the card (2) in cal- 

In the phase when it is used for calculating a certifi- culating the result (R) of the certificate (C). 

cate, the apparatus 1 will transmit this parameter PEC 8. A method as defined by claim 4, wherein said cal- 

directly to the customer's card 2. 40 culating comprises taking into account a random exter- 

Preferably this initializing step is not done simply nal parameter (PEA) transmitted to the card 92) in 

once and for all, nor prior to each transaction, but it calculating the result (R) of the certificate (C). 

must be repeated systematically, for example whenever 9. A method as defined by claim 5, wherein said cal- 

the battery 13 of the apparatus is empty, whenever the culating comprises taking into account a random exter- 

apparatus has been in operation for a predetermined 45 nal parameter (PEA) transmitted to the card (2) in cal- 

time, or whenever the apparatus has performed a given culating the result (R) of the certificate (C). 

number of transactions. 10. A method as defmed by claim 4 further compris- 

This greatly reduces the possible incentive to steal ing supplying the external parameter (PEC) from a 

such an apparatus. second card (4) similar to the first-mentioned card (2). 

In the above example, the certificate C is posted on a 50 11. A method as defmed by claim 5 further compris- 

carricr(receipt)madeof paper, which serves as a means ing supplying the external parameter (PEC) from a 

of proof, but the principle of the invention remains valid second card (4) similar to the first-mentioned card (2). 

if the carrier is electronic (memory) or magnetic (tape). 12. A method as defined by claims 1 or 2 further 

In that case, the certificate C is recorded on the elec- comprising displaying the result (R) of the certificate 

tronic or magnetic carrier at the end of the first step, 55 (Q on a display unit (11) and retranscribing the result 

and then the contents of this carrier are removed, for on the carrier (3). 

example daily or after every n transactions, and trans- 13. A method as defmed by claims 1 or 2 further 

mitted to a central system for certification (second comprising automatically posting on the carrier (3) the 

step). first result (R) of the certificate (C) calculated by the 

What is claimed is: 60 card (2). 

l^A method of certifying~a~ser>HM fvi^ the 14. A method as defmed by claims 1 or 2 wherein said 

aid of a portable card which is coupled to an apparatus, recording comprises recording the certificate (C) on an 

^'ttie card having a memory (M2) and processing circuits electronic or magnetic carrier. 

(T2),-the method comprising calculating in the process- 15. A method as defmed by claims 1 or 2 further 

ing circuits of the card a first result (R) based upon an 65 comprising verifying the authenticity of the card (2) by 

internal para meter (PI) prerecorded in the memory of picking up in the card (2) a first datum (12) that is not in 

the card and/or upon an external parameter (PE) and code and a second datum that is an encoded first datum 

upon a secret key (S); preparing a certificate (C) com- obtained by an encoding algorithm, applying an inverse 
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decoding function to the encoded second datum to 
retrieve a non-encoded datum, and verifying that this 
retrieved non-encoded datum is identical to the non- 
encoded first datum picked up in the card (2). 

16. A method as defmed by claim 15, wherein the 3 
encoding algorithm is the inverse function of the secret 
key of an algorithm having a public key, and the encod- 
ing algorithm is a public function with a public key of 
the algorithm type. 

17. A method as defmed by claim 1, wherein the 10 
first-mentioned secret key is stored in the memory of 
said portable card, and wherein said other secret key is 
stored in a second control card. 

18. An apparatus (1) certifying a service furnished 
with the aid of a portable memory card, the apparatus 15 
comprising a first memory (Ml), first processing circuit 
means (Tl), and a coupling circuit (12) for removably 
receiving the portable card (2), said card 92) comprising 



10 



a second memory (M2) and second processing circuit 
means (T2) for calculating a result (R) based on a pro- 
gram (P2) recorded in the second memory (M2), and 
which takes into account internal parameters (PI) re- 
corded in the second memory (M2) and/or external 
parameters (PE) entered into the card (2), said result 
being unique for each service furnished with the card 
(2). 

19. An apparatus as defined by claim 18 wherein the 
first memory (Ml) contains an external parameter 
(PEC) belonging to a vendor entity, the external param- 
eter being taken into account by the program in the card 
for calculating the result (R). 

20. An apparatus as defined by claim 19 wherein the 
parameter (PEC) is supplied from another card assigned 
to a vendor of the service and which is coupled to said 
apparatus (1). 



20 



25 



30 



35 



40 



45 



50 



55 



60 



65 



03/12/2004, EAST Version: 1.4.1 



UNITED STATES PATENT AND TRADEMARK OFFICE 

CERTIFICATE OF CORRECTION 

PATENT NO. : 4,825,052 
DATED : April 25, 1989 
ll\IVENTOR(S) : CHEMIN 

It is certified that error appears in the above-identified patent and that said Letters Patent is hereby 
corrected as shown below: 

In Col. 8, line 16, 17, (Claim 2), delete "the calculation 
takes" and insert — comprises taking — . 

In Col. 8, line 41, (Claim 8), "92)" should be —(2)—. 

In Col. 9, line 18, (Claim 18), "92)" should be ~{2) — . 

In Col. 10, line 9, (Claim 19), "18" should be ~16~. 



Signed and Sealed this 
Eighth Day of May, 1990 



Attest: 

HARRY F. MANBECK. ;R. 
Attesting Officer Commissioner of Ptuents and Thukmarks 
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